Security Architect

Hesfp, Llc

Washington, Northern (District of Columbia, KY)

Hybrid

USD 160,000 - 190,000

Full time

2 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical

Dental

Vision

401K

Job summary

HESFP, LLC in Washington, DC, is seeking a Security Architect to guide secure cloud solutions and IA controls across enterprise architectures, including Salesforce integrations. This role requires U.S. citizenship and an active TS/SCI clearance to support government programs.

You will drive cloud-based security configurations and collaborate with PMOs, engineers, and stakeholders to reduce risk to acceptable levels. Salary range is $160,000–$190,000 and benefits are provided.

Qualifications

Bachelor's degree and seven years of security/ATO experience.
Extensive knowledge of NIST SP 800-53 and RMF.
Experience securing cloud environments (AWS GovCloud, Azure Government) and FedRAMP.
Familiarity with Salesforce security model is a strong plus.
Certifications such as CISSP, CISSP-ISSAP, CCSP, or CISM are preferred.

Responsibilities

Guide the design and implementation of secure cloud solutions.
Drive configuration and implementation of cloud-based security controls.
Ensure stakeholder security requirements are addressed in enterprise architecture and IA policies.
Partner with Salesforce and development teams to embed security controls into pipelines.

Skills

Security architecture

Cloud security

Communication

Education

Bachelor's degree

Tools

AWS GovCloud

Azure Government

Salesforce security model

Job description

***As required by our governmental client, this position requires being a U.S. Citizen AND an active TS/SCI clearance***

As our Security Architect, you'll guide the design and implementation of secure solutions and services in the cloud, driving the configuration of cloud-based security capabilities that reduce risk to an acceptable level. You'll make sure stakeholder security requirements are addressed in every aspect of the enterprise architecture – from reference models to segment and cloud solution architectures – and serve as the Information Assurance (IA) authority the program leans on for architecture policies, procedures, and ATO support. While this role isn't Salesforce development, the platform you'll be securing includes Salesforce, so experience securing Salesforce or similar SaaS/PaaS environments is a strong plus.

Estimated Starting Salary Range for Security Architect$160,000-190,000

Pay commensurate with experience.

Full time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.

Security Architect Responsibilities Include

Guide the design and implementation of secure solutions and services within the cloud.
Drive the successful configuration and implementation of cloud-based security solutions to reduce risk to an acceptable level.
Ensure that stakeholder security requirements necessary to protect the organization's mission and business processes are adequately addressed in all aspects of enterprise architecture, including reference models, segment and cloud solution architectures, and the resulting systems supporting those missions and business processes.
Serve as an Information Assurance (IA) Subject Matter Expert (SME) with regards to IA Architecture policies and procedures.
Provide IA Management support to Program Management Offices (PMO) for emerging information systems through the acquisition lifecycle and, where applicable, into sustainment.
Provide technical support and guidance to facilitate the identification and integration of IA controls at the onset of the acquisition lifecycle for emerging cloud capabilities.
Serve as a principal liaison for Enterprise-level boundary defense initiatives to ensure consistent and sufficient identification and implementation of applicable IA controls in concert with the agency IA and cloud architecture and National Institute of Standards and Technology (NIST) security guidelines.
Provide oversight for the design and implementation of Enterprise-level IA solutions, providing standards for access control capabilities across the Enterprise.
Support Assessment and Authorization (A&A/ATO) activities, including control selection and implementation, security artifacts, POA&M management, and coordination with assessors and Authorizing Officials.
Partner with platform and development teams (including Salesforce) to embed security controls into platform configuration, integrations, and CI/CD pipelines.

Experience, Education, Skills, Abilities Requested

Bachelor's degree and seven (7) years of experience in security / ATO (Assessment and Authorization) work.
An emerging authority who applies extensive technical experience, develops technical solutions to complex problems, and exercises considerable latitude in determining objectives and approaches to assignments.
Deep working knowledge of NIST security guidance (e.g., NIST SP 800-53, Risk Management Framework) and federal ATO processes.
Experience architecting security for cloud environments (e.g., AWS/AWS GovCloud, Azure Government) and FedRAMP-aligned platforms.
Experience securing SaaS/PaaS platforms; familiarity with the Salesforce security model (profiles/permission sets, sharing, Salesforce Shield, event monitoring) is a strong plus.
Strong communication skills, with the ability to translate security requirements for PMOs, engineers, and non-technical stakeholders.
Certifications such as CISSP, CISSP-ISSAP, CCSP, or CISM are preferred.
Must be a U.S. Citizen and hold an active TS/SCI clearance.
Must pass pre-employment qualifications of Cherokee Federal.